kevinpapst/tabler-bundle-demo

Release historycaution

Only two releases have been published, with the latest on September 27, 2023 and no releases in the last 12 months. That is a meaningful sign of limited release maintenance, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Combined with no registry releases in the last year, this indicates currently quiet maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small demo application this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, though the package is a demo application and no other security-process evidence was provided.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous sinks or audit findings, and it has no broad top-level write permission. Both action references are unpinned, which reduces build reproducibility and leaves a minor supply-chain hygiene gap.